Changes with v1.0.0

 *) Remove existing NSS certificates before importing
    replacements. [Graham Leggett]

 *) Add detail to NSS error messages. [Graham Leggett]

 *) Add --tls-in to read certificates from endpoints
    pointed to by A and AAAA DNS records.
    [Graham Leggett]